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Most modern business activities are carried out by a combination of computerized tools 
and human agents. Typical examples are engineering design activities, office procedures, 
and banking systems. All these human-centered systems are characterized by the 
interaction among people, and between people and computerized tools. This interaction 
defines a process, whose effectiveness is essential to ensure the quality of the delivered 
products and/or services. To support these sys ... 
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Security is an important QoS attribute for characterizing intrusion tolerant computing 
systems. Frequently however, the security of computing systems is assessed in a 
qualitative manner based on the presence and absence of certain functional 
characteristics and security mechanisms. Such a characterization is not only ad hoc, it 
also lacks rigorous scientific and systematic basis. Some recent research efforts have 
emphasized the need for a quantitative assessment of security attributes for int ... 
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State trees are a technique for specifying the control of an interactive system by 
organizing states into trees to define shared structure and behavior. The tree structure 
permits inheritance of state information, event traps, and entry and exit actions from 
states to substates, thereby sharing information and reducing the amount of code to be 
written. An interface can be restructured by moving entire subtrees as modules. State 
trees separate the recognition of commands from their implement ... 
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Unlike signature or misuse based intrusion detection techniques, anomaly detection is 
capable of detecting novel attacks. However, the use of anomaly detection in practice is 
hampered by a high rate of false alarms. Specification-based techniques have been shown 
to produce a low rate of false alarms, but are not as effective as anomaly detection in 
detecting novel attacks, especially when it comes to network probing and denial-of- 
service attacks. This paper presents a new approach that combines ... 
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In recent years, UML has become a standard language for modeling software 
requirements and design. In this paper, we investigate the suitability of UML as a 
semiformal requirements specification language. Using the Teleservices and Remote 
Medical Care (TRMCS) case study as an example, we identify and demonstrate various 
problems and deficiencies of UML, particularly concerning use case models and system 
decomposition. We also investigate whether and how the deficiencies can be overcome 
and how p ... 
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